Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,349 npm 223,211 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,349 reports · Feed

  • npm
    @brick-v2/tour 999.0.1, 999.0.3, 999.0.2
    MAL-2026-17719 amazon-inspector 2 IOCs
  • npm
    @brick-v2/table 999.0.3, 999.0.2, 999.0.1
    MAL-2026-17718 amazon-inspector 2 IOCs
  • npm
    @brick-v2/icons 999.0.1, 999.0.3, 999.0.2
    MAL-2026-17717 amazon-inspector 2 IOCs
  • npm
    @brick-v2/form 999.0.1, 999.0.3
    MAL-2026-17716 amazon-inspector 2 IOCs
  • npm
    @brick-v2/core 999.0.2, 999.0.1
    MAL-2026-17715 amazon-inspector 2 IOCs
  • npm
    @brick-v2/brand 999.0.1, 999.0.3, 999.0.2
    MAL-2026-17714 amazon-inspector 2 IOCs
  • npm
    revine 2.4.0
    MAL-2026-17709 ghsa-malware
  • npm
    testrrrd 1.0.0, 0.0.1, 3.0.0, 99.0.1, 2.0.1, 1.1.0, 2.0.0
    MAL-2026-17706 amazon-inspector
  • npm
    @wxwxtest/testrrrdd 2.0.1, 2.0.0, 0.0.1, 3.0.0, 0.1.0, 1.0.0, 1.0.1
    MAL-2026-17704 amazon-inspector
  • npm
    wie888r 1.0.0, 99.0.1, 1.1.0, 0.0.1, 2.0.0, 3.0.0, 2.0.1, 1.0.1
    MAL-2026-17707 amazon-inspector
  • npm
    xblaxw 2.0.0, 1.0.1, 99.0.1, 1.0.0, 2.0.1, 3.0.0, 1.1.0
    MAL-2026-17708 amazon-inspector
  • npm
    css-overscroll-contain 1.0.1, 1.0.2, 1.0.3, 1.0.0
    MAL-2026-17705 amazon-inspector, ghsa-malware
  • PyPI
    kafka-helmsman 99.0.1, 99.0.2, 99.0.3, 99.0.4, 99.0.5, 99.0.6
    MAL-2026-17702 ossf-package-analysis, amazon-inspector, kam193
  • PyPI
    kafka-roller 99.0.0, 99.0.1, 99.0.2, 99.0.3, 99.0.4, 99.0.5, 99.0.6
    MAL-2026-17703 ossf-package-analysis, amazon-inspector, kam193
  • npm
    @kxafunc/xbails 0.0.8
    MAL-2026-17701 amazon-inspector
  • npm
    @bitwardne/jslib 1.1.0
    MAL-2026-17694 amazon-inspector
  • npm
    @bitwardne/cli 1.0.1
    MAL-2026-17693 amazon-inspector
  • npm
    clickfix_npm_delivery 1.0.2, 1.0.0
    MAL-2026-17692 ghsa-malware, amazon-inspector
  • npm
    @galicia-toolkit/core all versions
    MAL-2026-17688 ghsa-malware
  • npm
    tailwindcss-ui-extensions all versions
    MAL-2026-17687 ghsa-malware
  • npm
    tailwindcss-effects-kit all versions
    MAL-2026-17686 ghsa-malware
  • npm
    @galicia-toolkit/error-master 999.0.3
    MAL-2026-17689 ghsa-malware, amazon-inspector 4 IOCs
  • npm
    @galicia-toolkit/tag-manager 999.0.6, 999.0.3, 999.0.5
    MAL-2026-17691 ghsa-malware, amazon-inspector 5 IOCs
  • npm
    @galicia-toolkit/spa-build-config 999.0.3, 999.0.5, 999.0.6
    MAL-2026-17690 ghsa-malware, amazon-inspector 6 IOCs
  • npm
    system-driver all versions
    MAL-2026-17685 ghsa-malware
  • npm
    node-gyp-runtime all versions
    MAL-2026-17684 ghsa-malware
  • npm
    node-fetch-lite all versions
    MAL-2026-17683 ghsa-malware
  • npm
    connector-agent all versions
    MAL-2026-17682 ghsa-malware
  • npm
    node-env-resolve 1.2.3
    MAL-2026-17681 amazon-inspector, ghsa-malware
  • npm
    @bellaxchuu/overbugs all versions
    MAL-2026-17677 ghsa-malware
  • npm
    @bellaxchuu/familyxtrx 0.1.5
    MAL-2026-17344 ghsa-malware
  • npm
    @bellaxchuu/xbailey all versions
    MAL-2026-17678 ghsa-malware
  • npm
    @bellaxchuu/libsignal-node all versions
    MAL-2026-17676 ghsa-malware
  • npm
    @bellaxchuu/xtrxbails 0.0.8
    MAL-2026-17350 ghsa-malware
  • npm
    @bellaxchuu/velvetry 0.1.4, 0.1.3
    MAL-2026-17349 ghsa-malware
  • npm
    @bellaxchuu/skyblue 2.1.2
    MAL-2026-17347 ghsa-malware
  • npm
    @bellaxchuu/privatebails 1.4.1
    MAL-2026-17346 ghsa-malware
  • npm
    @bellaxchuu/flowblue 1.5.7
    MAL-2026-17345 ghsa-malware
  • npm
    @bellaxchuu/yarnbails all versions
    MAL-2026-17680 ghsa-malware
  • npm
    @bellaxchuu/xbails all versions
    MAL-2026-17679 ghsa-malware